SCI Security Controls Assessor (SCA) Representative A&A Speciali Jobs

Summary

SCI Security Controls Assessor Representative A&A Specialist

Leidos is seeking a SCI Security Controls Assessor Representative A&A Specialist to join our team in Suitland, MD. In this role, you will support the assessment and authorization of Navy Sensitive Compartmented Information (SCI) systems that enable critical Naval Intelligence missions. As a Security Controls Assessor Representative, you will assess Navy SCI systems in accordance with Naval Intelligence (NAVINTEL) Authorizing Official and Delegated Authorizing Official (AO/DAO) guidance. You will work within the Security Engineering Division at the Office of Naval Intelligence's Hopper Global Communications Center, evaluating complex environments, identifying cybersecurity risk, and helping ensure systems meet applicable security requirements. This posting is for multiple opportunities ranging in years of experience. Level of opportunity, including compensation, will be matched to a candidate's experience.

Responsibilities

• Support security assessment activities for complex Navy SCI IT systems, including Cross Domain Solutions and cloud environments.
• Perform laboratory and operational security assessments in accordance with Navy Risk Management Framework (RMF) guidance, NIST SP 800-37, NIST SP 800-53, and CNSS 1253.
• Execute assessments supporting Baseline Change Requests, Interim Authority to Test (IATT), documentation reviews, and other authorization activities.
• Document security assessment results and system risk posture comprehensively and accurately through Security Assessment Reports (SARs).
• Research and assess emerging technologies proposed for use within the Navy Intelligence operational environment.
• Maintain in depth knowledge of DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Utilize security tools, including Xacta, Tenable Nessus/ACAS, Evaluate STIG, eMASSter, STIG Viewer, and other automated tools to evaluate security controls and produce assessment results.
• Develop test procedures and methodologies for assessing security controls.
• Develop assessment processes, training materials, and documentation in accordance with DoD and Intelligence Community cybersecurity policies, directives, and instructions, producing high quality deliverables with minimal rework.

Basic Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or a related field with 10+ or 12+ years of experience. Additional years of experience required in lieu of a Bachelor's degree.
• Active TS/SCI security clearance.
• 10+ years of A&A experience with ICD-503 and/or NIST Framework.
• 3+ years of project management experience.
• Expert level experience with the assessment phase of the RMF process as defined in NIST 800-37.
• Experience as a Security Controls Assessor Representative.
• Experience with DoD, DISA, Navy Network Warfare Command (NNWC), DoDIIS, and IC tools, systems, reporting mechanisms, and A&A requirements.
• Strong oral and written communication skills.
• Ability to travel up to 25% within the National Capital Region and worldwide.

Required Certifications

• Active IAM Level II or higher certification, such as CompTIA SecurityX +CE, CISM, or CGRC, or the ability to obtain the certification within 30 days of an accepted offer.

Job Description

SCI Security Controls Assessor Representative A&A Specialist

Leidos is seeking a SCI Security Controls Assessor Representative A&A Specialist to join our team in Suitland, MD. In this role, you will support the assessment and authorization of Navy Sensitive Compartmented Information (SCI) systems that enable critical Naval Intelligence missions. As a Security Controls Assessor Representative, you will assess Navy SCI systems in accordance with Naval Intelligence (NAVINTEL) Authorizing Official and Delegated Authorizing Official (AO/DAO) guidance. You will work within the Security Engineering Division at the Office of Naval Intelligence's Hopper Global Communications Center, evaluating complex environments, identifying cybersecurity risk, and helping ensure systems meet applicable security requirements. This posting is for multiple opportunities ranging in years of experience. Level of opportunity, including compensation, will be matched to a candidate's experience.

Responsibilities

• Support security assessment activities for complex Navy SCI IT systems, including Cross Domain Solutions and cloud environments.
• Perform laboratory and operational security assessments in accordance with Navy Risk Management Framework (RMF) guidance, NIST SP 800-37, NIST SP 800-53, and CNSS 1253.
• Execute assessments supporting Baseline Change Requests, Interim Authority to Test (IATT), documentation reviews, and other authorization activities.
• Document security assessment results and system risk posture comprehensively and accurately through Security Assessment Reports (SARs).
• Research and assess emerging technologies proposed for use within the Navy Intelligence operational environment.
• Maintain in depth knowledge of DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Utilize security tools, including Xacta, Tenable Nessus/ACAS, Evaluate STIG, eMASSter, STIG Viewer, and other automated tools to evaluate security controls and produce assessment results.
• Develop test procedures and methodologies for assessing security controls.
• Develop assessment processes, training materials, and documentation in accordance with DoD and Intelligence Community cybersecurity policies, directives, and instructions, producing high quality deliverables with minimal rework.

Basic Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or a related field with 10+ or 12+ years of experience. Additional years of experience required in lieu of a Bachelor's degree.
• Active TS/SCI security clearance.
• 10+ years of A&A experience with ICD-503 and/or NIST Framework.
• 3+ years of project management experience.
• Expert level experience with the assessment phase of the RMF process as defined in NIST 800-37.
• Experience as a Security Controls Assessor Representative.
• Experience with DoD, DISA, Navy Network Warfare Command (NNWC), DoDIIS, and IC tools, systems, reporting mechanisms, and A&A requirements.
• Strong oral and written communication skills.
• Ability to travel up to 25% within the National Capital Region and worldwide.

Required Certifications

• Active IAM Level II or higher certification, such as CompTIA SecurityX +CE, CISM, or CGRC, or the ability to obtain the certification within 30 days of an accepted offer.